asp tutorials, asp.net tutorials, sample code, and Microsoft news from 15Seconds
Data Access  |   Troubleshooting  |   Security  |   Performance  |   ADSI  |   Upload  |   Email  |   Control Building  |   Component Building  |   Forms  |   XML  |   Web Services  |   ASP.NET  |   .NET Features  |   .NET 2.0  |   App Development  |   App Architecture  |   IIS  |   Wireless
 
Pioneering Active Server
 Power Search










Active News
15 Seconds Weekly Newsletter
• Complete Coverage
• Site Updates
• Upcoming Features

More Free Newsletters
Reference
News
Articles
Code Samples
Components
Tools
FAQ
Feedback
Books
Links
DL Archives
Community
Messageboard
List Servers
Mailing List
WebHosts
Consultants
Tech Jobs
15 Seconds
Home
Site Map
Press
Legal
Privacy Policy
internet.commerce














internet.com
IT
Developer
Internet News
Small Business
Personal Technology
International

Search internet.com
Advertise
Corporate Info
Newsletters
Tech Jobs
E-mail Offers

HardwareCentral
Compare products, prices, and stores at Hardware Central!

PreviousNext

 

email this FAQ to a colleague

Q: What authentication scheme does IIS use when multiple schemes are available?

A: According to the HTTP 1.1 spec in section 15.2 it states that when a server supports multiple authentication schemes that the server should return them to the browser in the order of most secure to least secure (ie: NTCR then Basic User Auth) and the browser should choose the first (most secure) one it supports. IE does follow this, as should other browsers.

- Brooks Cutter

Articles
Feb 3, 2005 - ASP.NET Mixed Mode Authentication
In many web applications it is desirable for both intranet users and external parties to be able to seamlessly log onto the system. The problem this raises is that it is not easy to allow intranet users to log in via Windows integrated authentication while also allowing external parties to log in to the same application using standard forms authentication. This article will show you one way to achieve the best of both worlds when it comes to authentication.
[Read This Article]  [Top]
Dec 8, 2004 - Designing Role-Based Security Models for .NET
In this article, Michele Leroux Bustamante discusses authentication, authorization and role-based security in .NET. Along the way, he provides some best practices for implementing role-based security in some typical .NET application scenarios including rich clients, Web applications, and Web services.
[Read This Article]  [Top]
May 11, 2004 - SharePoint Security and .NET Impersonation
When implementing custom components that require access to restricted resources, implicit impersonation must be used. Jay Nathan shows how to create a class that makes using .NET Impersonation a snap.
[Read This Article]  [Top]
Mar 10, 2004 - Intellectual Property Protection and Code Obfuscation
Learn about the execution process of CLR-based programs and how to protect your applications from being easily disassembled back into source code.
[Read This Article]  [Top]
Feb 24, 2004 - How to Send Secure Mail in ASP-Based E-Commerce Applications - Part II
Businesses that utilize encrypted e-mail may find Secure Multipurpose Internet Mail Extensions (S/MIME) to be somewhat restrictive. This article shows how to use security features in PDF as an alternative to S/MIME.
[Read This Article]  [Top]

Code Samples
Authenticate in ASP without NT
Checking NT Group for User Permissions

Related Topics
IIS 1.0
IIS 2.0
IIS 3.0

Knowledge Base Articles
IIS Execution File Text Can Be Viewed in Client
Q164059 - 1997.06.23
INFO: Security Ramifications for IIS Applications
Q158229 - 1997.08.28
PRB: Accessing SQL Database Fails on Second Att...
Q166659 - 1997.09.06
IIS: Authentication & Security Features
Q142868 - 1997.09.07
File Upload Does Not Work with NTLM Authenticat...
Q169546 - 1997.09.07


Support the Active Server Industry



JupiterOnlineMedia

internet.comearthweb.comDevx.commediabistro.comGraphics.com

Search:

Jupitermedia Corporation has two divisions: Jupiterimages and JupiterOnlineMedia

Jupitermedia Corporate Info


Legal Notices, Licensing, Reprints, & Permissions, Privacy Policy.

Advertise | Newsletters | Tech Jobs | Shopping | E-mail Offers